SUSE-SU-2025:0320-1 Security update for buildah

This update for buildah fixes the following issues: - Update to version 1.35.5 - CVE-2024-11218: Fix TOCTOU error when bind and cache mounts use 'src' values. bsc1236272...

SUSE-SU-2025:0319-1 Security update for buildah

This update for buildah fixes the following issues: - Update to version 1.35.5 - CVE-2024-11218: Fix TOCTOU error when bind and cache mounts use 'src' values. bsc1236272...

SUSE-SU-2025:0301-1 Security update for buildah

This update for buildah fixes the following issues: - Update to version 1.35.5 - CVE-2024-11218: Fix TOCTOU error when bind and cache mounts use 'src' values. bsc1236272...

CLSA-2025-1737993791 postgresql: Fix of CVE-2024-7348

CVE-2024-7348: Fix TOCTOU race condition in pgdump...

Important: postgresql

Issue Overview: Time-of-check Time-of-use TOCTOU race condition in pgdump in PostgreSQL allows an object creator to execute arbitrary SQL functions as the user running pgdump, which is often a superuser. The attack involves replacing another relation type with a view or foreign table. The attack...

Important: postgresql

Issue Overview: Time-of-check Time-of-use TOCTOU race condition in pgdump in PostgreSQL allows an object creator to execute arbitrary SQL functions as the user running pgdump, which is often a superuser. The attack involves replacing another relation type with a view or foreign table. The attack...

Important: tomcat10

Issue Overview: Time-of-check Time-of-use TOCTOU Race Condition vulnerability during JSP compilation in Apache Tomcat permits an RCE on case insensitive file systems when the default servlet is enabled for write non-default configuration. This issue affects Apache Tomcat: from 11.0.0-M1 through...

IBM Engineering Systems Design Rhapsody - Model Manager 7.0.2 < 7.0.2 iFix 32, 7.0.3 < 7.0.3 iFix 10 TOCTOU (7180636)

The version of IBM Engineering Systems Design Rhapsody - Model Manager installed on the remote host is 7.0.2 prior to 7.0.2 ifix 32 or 7.0.3 prior to 7.0.3 ifix 10. It is, therefore, affected by a Time-of-check Time-of-use TOCTOU vulnerability as referenced in the 7180636 advisory. - IBM...

tomcat: RCE due to TOCTOU issue in JSP compilation

A flaw was found in Tomcat. A Time-of-check Time-of-use TOCTOU race condition occurs during JSP compilation on case-insensitive file systems when the default servlet is enabled for writing. This vulnerability allows an uploaded file to be treated as a JSP and executed, resulting in remote code...

tomcat: RCE due to TOCTOU issue in JSP compilation

A flaw was found in Tomcat. A Time-of-check Time-of-use TOCTOU race condition occurs during JSP compilation on case-insensitive file systems when the default servlet is enabled for writing. This vulnerability allows an uploaded file to be treated as a JSP and executed, resulting in remote code...

CVE-2024-10253

A potential TOCTOU vulnerability was reported in PC Manager, Lenovo Browser, and Lenovo App Store that could allow a local attacker to cause a system crash...

CVE-2024-10253

A potential TOCTOU vulnerability was reported in PC Manager, Lenovo Browser, and Lenovo App Store that could allow a local attacker to cause a system crash...

CVE-2024-10253

A potential TOCTOU vulnerability was reported in PC Manager, Lenovo Browser, and Lenovo App Store that could allow a local attacker to cause a system crash...

CVE-2024-10253

CVE-2024-10253 describes a potential TOCTOU vulnerability in Lenovo PC Manager, Lenovo Browser, and Lenovo App Store that could allow a local attacker to crash the system. The initial entry lists a LOCAL attack vector with HIGH availability impact and MEDIUM overall severity (CVSS 3.1: AV:L/AC:H/...

CVE-2024-42444 TOCTOU Race Condition between DMA and SMM

APTIOV contains a vulnerability in BIOS where an attacker may cause a TOCTOU Race Condition by local means. Successful exploitation of this vulnerability may lead to execution of arbitrary code on the target device...

CVE-2024-42444

CVE-2024-42444 affects AMI AptioV BIOS and is described as a TOCTOU race condition involving BIOS components (DMA/SMM) that may allow local attackers to execute arbitrary code on the target device. The available sources consistently report a BIOS-level vulnerability with a TOCTOU contention condi...

CVE-2024-42444 TOCTOU Race Condition between DMA and SMM

APTIOV contains a vulnerability in BIOS where an attacker may cause a TOCTOU Race Condition by local means. Successful exploitation of this vulnerability may lead to execution of arbitrary code on the target device...

PT-2025-2636 · Aptiov · Aptiov

Name of the Vulnerable Software and Affected Versions: APTIOV affected versions not specified Description: The issue is related to a TOCTOU Race Condition in the BIOS of APTIOV, which can be exploited by an attacker using local means. This could potentially lead to the execution of arbitrary code...

PT-2025-1583 · Lenovo · Lenovo Pcmanager +2

Name of the Vulnerable Software and Affected Versions: Lenovo PC Manager affected versions not specified Lenovo Browser affected versions not specified Lenovo App Store affected versions not specified Description: A potential TOCTOU vulnerability was reported that could allow a local attacker to...

FreeBSD : Apache Tomcat -- RCE due to TOCTOU issue in JSP compilation (ed0a052a-c5e6-11ef-a457-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the ed0a052a-c5e6-11ef-a457-b42e991fc52e advisory. [email protected] reports: Time-of-check Time-of-use TOCTOU Race Condition The mitigation for...